Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-pluginsUpgrade toolboxUpgrade conmonUpgrade criu-develUpgrade criu-libsUpgrade container-selinuxUpgrade grafana-pcpUpgrade libslirp-develUpgrade crunUpgrade podman-remoteUpgrade golang-binUpgrade grafanaUpgrade golang-testsUpgrade golang-raceUpgrade skopeoUpgrade delveUpgrade containers-commonUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade podmanUpgrade golangUpgrade buildah-testsUpgrade udicaUpgrade critUpgrade toolbox-testsUpgrade podman-testsUpgrade golang-srcUpgrade fuse-overlayfsUpgrade git-lfsUpgrade aardvark-dnsUpgrade golang-docsUpgrade criuUpgrade go-toolsetUpgrade python3-criuUpgrade buildahUpgrade podman-catatonitUpgrade netavarkUpgrade runcUpgrade podman-dockerUpgrade libslirpUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade golang-misc | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-binUpgrade runc-debuginfoUpgrade go-filesystemUpgrade golang-github-syndtr-gocapability-develUpgrade golist-debuginfoUpgrade golang-github-gorilla-mux-develUpgrade go-rpm-templatesUpgrade go-srpm-macrosUpgrade golang-googlecode-sqlite-develUpgrade golang-sharedUpgrade golang-docsUpgrade golang-srcUpgrade golang-github-godbus-dbus-develUpgrade golang-googlecode-net-develUpgrade runcUpgrade go-rpm-macrosUpgrade golang-raceUpgrade golang-github-kr-pty-develUpgrade golang-github-gorilla-context-develUpgrade golang-testsUpgrade golistUpgrade golang-misc | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-github-cpuguy83-md2man-develUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-miscUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-srcUpgrade golist-debuginfoUpgrade golist-debugsourceUpgrade golang-github-cpuguy83-md2manUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golistUpgrade golang-docsUpgrade golang-testsUpgrade golang-sharedUpgrade golang-binUpgrade golang-race | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade buildahUpgrade delve-debuginfoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade buildah-tests-debuginfoUpgrade golang-srcUpgrade containers-commonUpgrade netavarkUpgrade fuse-overlayfs-debuginfoUpgrade libslirpUpgrade crun-debuginfoUpgrade skopeoUpgrade golang-raceUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade golang-miscUpgrade grafana-debuginfoUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade fuse-overlayfs-debugsourceUpgrade python3-podmanUpgrade slirp4netnsUpgrade git-lfs-debugsourceUpgrade podman-gvproxyUpgrade skopeo-debuginfoUpgrade criu-libsUpgrade conmonUpgrade podman-testsUpgrade delve-debugsourceUpgrade golangUpgrade skopeo-debugsourceUpgrade criuUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade cockpit-podmanUpgrade podman-catatonit-debuginfoUpgrade criu-debuginfoUpgrade libslirp-develUpgrade containernetworking-plugins-debuginfoUpgrade runc-debugsourceUpgrade podman-remoteUpgrade slirp4netns-debugsourceUpgrade grafana-pcp-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade grafana-pcpUpgrade git-lfsUpgrade podman-plugins-debuginfoUpgrade git-lfs-debuginfoUpgrade buildah-testsUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade grafanaUpgrade podmanUpgrade critUpgrade conmon-debuginfoUpgrade toolbox-debugsourceUpgrade go-toolsetUpgrade golang-testsUpgrade aardvark-dnsUpgrade crun-debugsourceUpgrade udicaUpgrade skopeo-testsUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade crunUpgrade golang-docsUpgrade criu-develUpgrade criu-debugsourceUpgrade runc-debuginfoUpgrade runcUpgrade podman-dockerUpgrade criu-libs-debuginfoUpgrade toolbox-testsUpgrade slirp4netns-debuginfoUpgrade golang-binUpgrade delveUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfo | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade podman-catatonitUpgrade python3-podmanUpgrade criuUpgrade golang-raceUpgrade grafana-pcpUpgrade golang-testsUpgrade buildah-testsUpgrade golang-docsUpgrade udicaUpgrade containernetworking-pluginsUpgrade runcUpgrade golang-binUpgrade skopeoUpgrade critUpgrade podman-remoteUpgrade buildahUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade golang-miscUpgrade podman-dockerUpgrade netavarkUpgrade golangUpgrade podmanUpgrade go-toolsetUpgrade podman-testsUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade libslirp-develUpgrade container-selinuxUpgrade containers-commonUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade git-lfsUpgrade crunUpgrade conmonUpgrade golang-srcUpgrade delveUpgrade criu-libsUpgrade python3-criuUpgrade grafanaUpgrade podman-pluginsUpgrade libslirpUpgrade criu-develUpgrade cockpit-podman | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade toolbox-debuginfoUpgrade libslirp-debugsourceUpgrade git-lfs-debugsourceUpgrade slirp4netnsUpgrade delveUpgrade toolbox-debugsourceUpgrade grafanaUpgrade podman-plugins-debuginfoUpgrade crunUpgrade golang-binUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade udicaUpgrade libslirpUpgrade skopeo-testsUpgrade criu-develUpgrade delve-debugsourceUpgrade criu-libs-debuginfoUpgrade skopeo-debuginfoUpgrade buildah-debugsourceUpgrade toolboxUpgrade podman-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade go-toolsetUpgrade skopeoUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade podman-pluginsUpgrade golang-docsUpgrade podman-gvproxyUpgrade conmonUpgrade git-lfsNo solution existsUpgrade podman-testsUpgrade podman-catatonit-debuginfoUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade container-selinuxUpgrade podman-dockerUpgrade slirp4netns-debuginfoUpgrade runcUpgrade grafana-pcp-debuginfoUpgrade slirp4netns-debugsourceUpgrade critUpgrade git-lfs-debuginfoUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade skopeo-debugsourceUpgrade conmon-debuginfoUpgrade delve-debuginfoUpgrade crun-debugsourceUpgrade podman-remoteUpgrade netavarkUpgrade containers-commonUpgrade podman-remote-debuginfoUpgrade python3-podmanUpgrade golangUpgrade podmanUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade golang-raceUpgrade grafana-debuginfoUpgrade libslirp-develUpgrade criuUpgrade buildah-testsUpgrade conmon-debugsourceUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade golang-miscUpgrade fuse-overlayfs-debuginfoUpgrade buildah-tests-debuginfoUpgrade grafana-pcpUpgrade golang-testsUpgrade toolbox-testsUpgrade crun-debuginfoUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade golang-src | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade delveUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafana-pcp-debuginfoUpgrade criu-develUpgrade criuUpgrade git-lfs-debugsourceUpgrade golang-raceUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirpUpgrade delve-debugsourceUpgrade golangUpgrade criu-libsUpgrade grafana-pcpUpgrade go-toolsetUpgrade critUpgrade python3-criuUpgrade libslirp-develUpgrade golang-binUpgrade git-lfs-debuginfoUpgrade criu-debugsourceUpgrade grafana-debuginfoUpgrade git-lfsUpgrade criu-libs-debuginfoUpgrade delve-debuginfoUpgrade libslirp-debuginfoUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade grafana | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18Upgrade go1.17-docUpgrade go1.18-opensslUpgrade go1.18-docUpgrade go1.18-openssl-raceUpgrade go1.17-raceUpgrade go1.17Upgrade go1.18-raceUpgrade go1.18-openssl-doc | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-goUpgrade golang-1.18-goUpgrade golang-1.16Upgrade golang-1.18Upgrade golang-1.16-srcUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.18-srcUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.16 (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub